Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: U5f/5GTXF7OURFc43XD1FzbSsH3d1w1ATexStVAddCM=
Subject key identifier: DC:D9:E8:86:5C:08:B2:33:31:1C:65:A4:E1:D6:4E:06:13:5E:49:8C
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 019FAA888FD2BFAAA28F9E966AEB2016F815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 21:01:43 +0000
Manifest this update: Tue 28 Jul 2026 21:01:43 +0000
Manifest next update: Wed 29 Jul 2026 21:01:43 +0000
Files and hashes: 1: Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa (hash: JdSfPmOZyz9SS20YY9m/BqTfnfPdc3k8FKlJ51fneog=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: ns/v6OXouc3Ri7O8c8PU31OZBbl4VV3sbwQeiCz2kfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:8f:d2:bf:aa:a2:8f:9e:96:6a:eb:20:16:f8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Jul 28 21:01:43 2026 GMT
Not After : Jul 29 21:01:43 2026 GMT
Subject: CN=dcd9e8865c08b233311c65a4e1d64e06135e498c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:b9:0b:08:2a:df:82:a1:2f:0d:04:4a:b1:
09:70:9f:6d:3e:5c:3c:29:17:5f:60:4a:5a:1b:b9:
c9:95:24:ad:2d:96:7d:ec:82:b4:9c:67:29:25:e7:
9b:37:0c:1a:8a:23:41:68:a0:e8:ef:42:de:01:4b:
64:ec:89:5d:04:d9:b5:d0:bf:59:0c:5e:dc:c6:a9:
86:52:1d:d6:a9:c1:4a:87:8a:01:53:b7:ac:53:03:
b6:db:9c:b2:f5:2b:f2:96:56:91:00:e2:dd:48:e7:
b8:58:0b:12:f7:89:b1:e9:8b:83:d9:38:9d:7e:45:
d2:e6:f0:f3:69:a1:7f:e8:f1:5b:5e:d4:09:54:31:
ba:b2:fc:a9:01:29:e1:84:8f:a0:75:93:8d:11:2e:
bb:f6:7a:0b:dc:c8:4e:43:fa:d6:af:4c:78:27:55:
49:df:17:a2:d8:37:df:aa:b2:e4:2f:ff:96:e2:71:
d9:ce:7b:0c:3b:ab:3e:1a:50:2c:46:e3:d3:27:57:
78:d4:36:02:6f:76:95:b6:76:6e:c3:77:e1:3d:cf:
c6:dd:5a:3b:2a:5b:91:b9:ac:fb:29:5c:5d:81:28:
88:9d:29:55:da:5c:a0:bf:b0:ed:63:42:55:f7:21:
c7:fe:79:8f:38:a8:65:1a:a8:90:9f:86:d6:10:f2:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D9:E8:86:5C:08:B2:33:31:1C:65:A4:E1:D6:4E:06:13:5E:49:8C
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ab:2a:f2:7f:c7:59:2b:d5:35:1d:63:fd:37:25:bd:7f:5a:
e8:e7:25:35:16:f7:8d:2e:2e:8d:e9:e1:ed:f6:cb:57:cd:f3:
3f:f5:e6:6e:b7:63:dc:73:cf:9f:63:d7:69:b7:35:0c:a9:e4:
ae:27:56:66:17:4d:e6:ce:31:73:bc:10:fa:47:8c:91:96:56:
aa:41:aa:f6:36:6e:09:b1:70:8d:82:95:74:d5:65:ee:50:e4:
b7:35:40:de:c0:06:e2:e9:0e:30:68:93:09:09:aa:eb:80:d3:
f7:c6:64:1f:7a:95:2d:49:92:c1:c1:6d:33:a7:f5:1f:5e:d6:
c2:14:48:50:ab:ed:4d:9b:54:aa:84:60:44:c4:57:2c:19:b7:
8c:e1:cc:89:6e:78:b8:a8:41:93:fd:f3:10:3e:b4:4a:a4:56:
21:52:bf:4a:79:d7:07:87:92:ed:a5:8d:f8:77:a5:e6:69:ce:
a0:72:d3:63:c6:a6:0f:39:e1:23:6d:d4:ce:16:50:2c:2f:df:
62:50:10:73:04:af:85:ce:f4:94:8a:fa:5c:43:36:98:3c:20:
67:d5:e8:14:cd:5f:f7:4e:74:fd:b6:e3:09:0f:1e:f5:28:05:
65:9b:75:d9:f1:ea:74:68:ce:dd:3f:85:7d:40:7f:6b:cf:9f:
b2:fe:c6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:04:25 2026 by rpki-client